setup-mofa-remote-tool
Pass
Audited by Gen Agent Trust Hub on Aug 24, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads an external Python wheel from
https://connect.aiscientist.tools/. This is documented as a necessary step for connecting the tool to the ToolUniverse platform. The download includes a pinned SHA-256 hash (3fad5eee5ecf7887a693d93ccd1aa112dc0955617a885d1fc3daded0030f9ae0) to ensure file integrity and prevent tampering. - [COMMAND_EXECUTION]: The skill provides instructions for setting up a Python virtual environment and installing dependencies via
pip. These are standard development procedures for bioinformatics software. - [CREDENTIALS_SAFE]: The skill explicitly advises against putting credentials in shell arguments or Git. It promotes the use of local
0600configuration files and secure environment variables (TOOLUNIVERSE_SERVICE_KEY) for authentication. - [DATA_EXFILTRATION]: Network operations are directed to localhost (
127.0.0.1) for local testing and a specific ToolUniverse domain (connect.aiscientist.tools) for relaying. There is no evidence of unauthorized data transmission.
Audit Metadata